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Abstract 

T/»is  paper  is  an  update  of  the  on-orbit  operational  per/ormante  of  the  frequency  standards  on 
the  last  Block  [  ^AySTAR  satellite  (GPS-10),  the  complete  Block  II  NAVSTAR  satellites  (GPS-13 
to  21)  and  the  Block  llA  NAVSTAR  (GPS-22  to  40)  satellites.  Since  the  siaius  of  the  GPS 
constellation  is  now  oi  Full  Operational  Capability  (FOC),  a  minimum  of  twenty -four  satellites  are 
in  position  with  all  the  necessary  tests  successfully  completed.  The  evolution  of  frequency  standards 
on  board  the  GPS  vehicles  will  be  presented  with  corresponding  results. 

Various  methods  and  techni<7ues  will  be  presented  to  show  on-orbit  life  time,  down  time,  state 
of  health  telemetry,  on-orbit  trending  and  characterization  of  all  the  frequency  standards.  Other 
topics  such  as  reliability,  stability,  clock  quirks  and  idiosyncrasies  of  each  vehicle  will  be  covered. 


INTRODUCTION 

The  evaluation  of  the  space-rated  frequency  standards  on  the  GPS  program  started  with  the 
Block  I  concept  validation  program  and  the  full-scale  development  vehicles  of  which  only  one 
is  still  functional:  GPS-10  (PRN-12).  The  production  vehicles  are  divided  into  two  groups, 
Block  II  (GPS-13  through  21)  and  Block  II A  (GPS-22  through  40).  Each  vehicle  includes 
two  Rubidium  Frequency  Standards  (made  by  Rockwell)  and  two  cesium  Frequency  Standards 
(made  by  Frequency  and  Time  Systems  as  the  primary  source  and,  Kernco  and  Frequency 
Electronics  Inc.  as  secondary  sources  on  selected  vehicles). 

The  cesium  clocks  are  considered  primary  because  of  their  degree  of  radiation  hardness,  their 
extremely  low  frequency  drift,  or  aging,  which  does  not  require  any  Kalman  filter  modeling, 
and  the  shorter  modeling  time  between  turn-on  and  activation  for  GPS  users. 

The  actual  on-orbit  GPS  Frequency  Standard  operating  history  (shown  in  Figure  1  for  the  last 
Block  I  and  all  Block  II  satellites,  and  in  Figure  2  for  the  Block  IIA  satellites  minus  the  four 
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vehicles  in  the  Eastern  Launch  Site  awaiting  launch)  illustrates  the  results  of  these  hardware 
implementations. 

The  operating  life  history  of  the  production  models  of  both  cesium  and  rubidium  frequency 
standards  will  be  briefly  discussed.  This  will  be  reviewed  in  order  to  calm  the  doubting  Thomas’s 
or  Henny  Pennies,  that  the  sky  is  not  falling  in  regard  to  (1)  the  amount  of  disabled  clocks 
that  have  recently  been  occurring,  Dec  94  -  July  95,  (2)  the  reliability  of  the  clocks  and  (3) 
the  combined  projected  lifetime  of  the  four  clocks  (7.5  years)  on  each  of  the  vehicles. 

A  brief  history  of  the  rubidium  clocks  on  the  Block  I  vehicles  is  given  in  Table  1.  The 
major  problems  were  corrected  via  modifications  (the  final  modified  clock  for  Block  II/IIA  is 
Modification  number  12).  The  non-generic  problems  were  never  repaired.  From  the  sample 
of  30  Block  1  rubidiums  launched,  the  average  age  was  1.5  years  with  a  maximum  of  12.5  years 
and  a  minimum  of  one  day.  The  minimum  acceptable  hardware  reliability  requirement  for  a 
five-year  life  rubidium  clock  was  0.765,  which  equates  to  a  3.8  year  projection  life. 

The  history  of  the  rubidium  clocks  on  the  Block  II/IIA  vehicles  is  given  in  Table  2.  Of  the  six 
disabled  clocks,  four  may  be  retried  with  possible  degraded  performance.  The  final  production 
model  #12  RFS’s  have  not  acquired  much  on-orbit  operating  time,  since  the  cesium  clocks 
have  traditionally  been  preferred  over  the  rubidiums.  This  is  because  of  the  advantage  of 
cesium  over  rubidiums  in  terms  of  radiation  hardness,  lower  drift  rate  by  a  factor  of  100,  no 
C-field  tuning  or  frequency  biasing  needed,  and  a  shorter  warm-up  time  before  the  vehicle 
can  be  set  healthy  (2.6  days  versus  6.4  days  on  the  average).  There  have  been  eleven  turn-ons 
with  six  powered  down,  for  a  total  time  of  120  months  or  87,380  operational  hours,  as  of  30 
November  1995.  Since  the  hours  of  operation  (sample  size)  are  so  small,  a  point-in-time 
failure  rate  estimate  must  be  used.  If  the  two  failures  are  used,  then  the  calculated  failure 
rate  is  26.5  x  10~®  or  an  Mean  Time  Between  Failure  (MTBF)  of  4.3  years.  If  the  six  disabled 
clocks  are  considered  complete  failures,  then  the  failure  rate  is  79.6  x  10“®  and  an  MTBF  of 
1.4  years. 

The  operating  history  of  the  cesium  clocks  on  the  Block  I  vehicles  is  as  follows:  a  total  of 
six  clocks  (three  pre-production  models  and  three  Model  1  production  clocks)  with  an  average 
life  time  of  5.9  years  (Maximum  of  9.3  years  and  a  minimum  of  3.3  years).  Since  five  of  the 
failures  were  caused  by  cesium  depletion,  the  final  production  model  (Model  2)  had  an  increase 
of  cesium  fill  (1.0  grams  to  1.5  grams). 

The  history  of  the  cesium  clocks  on  Block  II/IIA  vehicles  is  given  in  Table  3.  Of  the  thirty-one 
CFS’s  powered-up,  nineteen  are  still  operating,  with  an  age  range  of  6.5  years  to  seven  months. 
Of  the  twelve  clocks  which  have  been  disabled,  six  have  been  labeled  failures  and  six  may 
be  given  a  second  chance  with  possible  degraded  performance.  If  the  five  failures,  excluding 
one  GFE  clock,  are  used,  then  the  calculated  failure  rate  (via  the  point-in-time  failure  rate 
estimate)  is  7.2  x  10”®  and  the  MTBF  is  15.8  years.  If  the  ten  disabled  clocks  (excluding  the 
two  GFE  clocks)  are  considered  failures,  then  the  failure  rate  is  14  x  10”®  and  the  MTBF  is 
equal  to  7.9  years.  The  manufacturer  signed  up  for  a  minimum  acceptable  hardware  reliability 
requirement  for  a  7.5  year  life  of  0.663,  or  4.3  years  per  clock.  Taking  the  reliability  numbers  of 
both  rubidium  and  cesium  clocks,  plus  having  to  meet  the  navigation  payload  reliability  number 
of  0.934  for  7.5  year  life,  the  number  of  clocks  per  vehicle  came  out  to  be  two  rubidiums  and 
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two  cesiums.  Another  figure  to  remember  is  the  mean  mission  duration  value  of  six  years,  a 
specification  which  five  vehicles  have  already  surpassed.  In  summary,  the  complete  GPS  Block 
II/IIA  clock  status  is  included  in  Table  4. 

ON-ORBIT  PERFORMANCE 

In  order  to  acquire  the  exact  performance  characteristics  of  the  operating  on-orbit  frequency 
standard,  the  L-Band  signal  must  be  evaluated.  This  signal  is  affected  by  the  (Frequency 
Synthesizer  Distributor  Unit)  FSDU  (which  is  commanded  by  the  NDU),  atmospheric  effects, 
ephemeris  uncertainties,  monitor  station  variations,  spacecraft  effects  and  other  factors.  All  of 
these  factors  are  fed  into  a  Kalman  filter,  which  is  a  computer  algorithm  for  processing  discrete 
measurement  data  in  an  optimal  fashion. 

There  are  several  parameters  which  are  instrumental  in  evaluating  the  operational  performance 
of  the  frequency  standards.  The  first  two  parameters  are  in  the  navigation  message.  One  is  ai, 
which  is  the  frequency  offset  (set^sec).  This  is  the  filter’s  estimate  of  the  frequency  difference, 
or  offset  between  the  satellite’s  frequency  standard  and  the  GPS  composite  clock  (a  nominal 
frequency).  This  is  a  continuous  absolute  value.  One  can  also  take  the  daily  average  of  the 
difference  between  the  minimum  and  maximum  values  of  a\  as  a  possible  trending  signature. 
Another  parameter  is  the  frequency  drift  in  sec/sec^,  a2  term.  This  is  the  rate  of  change  of  the 
drift  term. 

Another  parameter  that  is  used  daily  to  evaluate  the  clock’s  performance  is  the  Estimated  Range 
Deviation  (ERD).  An  ERD  is  the  difference  between  a  range  determined  from  the  aposteriori 
state  estimates  during  a  Kalman  interval  and  the  range  determined  from  the  navigation  upload 
data  that  is  valid  for  the  same  time.  These  ERD’s  compare  the  current  filter  estimates  each 
15  minute  period  to  the  prediction  made  from  previous  filter  estimates  (considered  to  be 
a  minimum  range  error  either  induced  primarily,  by  clock  movement  or  satellite  positional 
change).  Examples  of  these  ERD’s  are  in  Figures  3  and  4.  Plots  of  these  estimates  provides 
us  one  more  clue  of  evaluating  the  performance  of  each  spacecraft’s  clock. 

Continuing  the  investigation  of  a  potential  clock  problem,  a  correlation  of  these  ERD  plots  to 
the  telemetry  monitor  values  must  be  examined.  Along  with  these  clock  monitor  values,  the 
a\  and  a2  terms  must  be  observed  for  movement. 

One  important  aspect  of  Kalman  filter  operation  is  to  provide  accurate  continued  measurement 
updates,  every  fifteen  minutes.  Unfortunately,  there  are  periods  when  the  spacecraft  is  not  in 
view  of  a  monitor  station,  and  the  filter  must  estimate  aging  through  the  a2  term,  with  no  real 
measurement  verification.  Also,  different  monitor  stations  (with  obvious  different  clock  errors) 
contribute  errors  into  the  filter  estimation  and  subsequently  the  prediction  process. 

An  operating  limit  is  set  on  the  ERD  value  in  terms  of  meters  (eg.  10  meters  or  8  meters). 
When  the  limit  is  exceeded,  a  new  upload  must  be  sent  to  the  vehicle  to  correct  the  new  terms 
in  the  navigation  message.  A  new  experimental  limit  has  recently  been  defined  as  5  meters, 
resulting  in  a  fifteen  percent  improvement  in  the  URE,  This  also  has  increased  the  work  load 
on  the  Master  Control  Station  (MCS)  crew,  which  now  performs  approximately  twelve  more 
uploads  per  day  on  the  25  vehicles.  As  a  rule,  the  MCS  contacts  each  vehicle  twice  a  day. 


169 


once  to  update  the  navigation  message.  This  equates  to  a  total  of  60  to  70  supports  per  day 
for  the  MCS  crew. 

Another  set  of  parameters  which  appear  to  effect  the  clock’s  performance  are  environmental 
effects,  such  as  prolonged  radiation  effects  (i.e.  passing  through  the  Van  Allen  belts  every 
twelve  hours)  and  irregular  .solar  activities.  Thermal  variations,  either  induced  by  delta-v 
maneuvers  or  eclipse  seasons,  appear  to  be  causing  the  older  cesium  clocks  (>  5  years)  the 
mo.st  problems  in  terms  of  ERD’s.  Maybe  aging  of  the  electronics,  resulting  in  a  degraded 
temperature  coefficient  causes  frequency  changes.  The  eclipse  season  causes  the  cesium  clock’s 
temperature  to  decrease  by  three  degrees  centigrade  with  a  ±  1°  C  variation.  The  rubidium 
does  not  have  this  problem  since  a  heater  (ABTCU)  keeps  the  rubidium  clock  at  a  stable 
temperature,  ±  0.1“  C.  When  the  satellite  enters  eclipse  season  especially  during  the  first  eclipse 
season,  an  ephemeris change  could  also  occur,  which  is  corrected  by  manual  intervention  from 
the  operators. 


ON-ORBIT  TRENDING 

The  most  important  objective  of  trending  analysis  is  to  determine  when  a  particular  frequency 
standard  is  no  longer  useful  for  providing  a  navigation  signal.  Particularly  elusive  is  the  time 
frame  -  whether  it  be  in  days  or  months  -  when  a  clock  will  expire.  Note  that  this  is  different 
than  not  meeting  specifications.  The  stability  specification  of  the  clock,  2  x  10“^^  at  one  day 
for  the  cesium  clock,  is  so  tight,  that  if  the  clock  is  performing  at  3  x  10“^^  at  one  day,  the 
URE  of  4.8  meters  (1  s)  can  still  be  met  with  extra  maintenance  by  the  MCS,  for  the  space 
segment.  There  are  several  vehicles  now  that  do  not  meet  the  stability  specification,  but  the 
Air  Force  is  reluctant  to  switch  to  another  clock.  The  Air  Force  will  determine  when  a  clock 
will  be  disabled  by  many  factors. .  These  factors  include: 

1.  how  burdensome  to  the  MCS  crew  are  extra  daily  uploads  and/or  Kalman  maintenance 
in  order  to  correct  the  al  and  a2  terms? 

2.  how  old  is  the  clock  (>  5  years)? 

3.  how  old  is  the  vehicle  (>  6  years)? 

4.  how  many  clocks  are  left  to  be  tried? 

5.  what  is  the  world  situation  (conflicts/trouble  spots)? 

6.  what  is  the  condition  of  the  vehicle  in  terms  of  performance  operation  and  other  subsys¬ 
tems?  and 

7.  what  is  the  condition  of  the  entire  constellation? 

The  navigation  signal  must  be  made  available  98%  of  the  time  with  21  spacecraft.  In  predicting 
the  useful  operating  lifetime  of  the  clock,  the  most  important  performance  parameter  is  the 
stability  of  the  clock.  This  is  what  most  effects  the  user,  and  is  the  most  sensitive  parameter. 
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The  next  set  of  parameters  are  the  al  and  a2  terms  and  their  deterioration  and/or  fluctuations, 
and  the  ERD’s.  The  last  set  of  parameters  which  effect  the  performance  of  the  clock  and 
that  of  the  navigational  signal  is  internal  to  the  clock.  The  cesium  clock  has  18  monitors 
(combination  of  analog  and  digital)  and  the  rubidium  clock  has  11  monitors  (combination 
analog  and  digital).  Of  all  the  telemetry  monitors  on  the  cesium  clock,  there  are  only  a  few 
that  could  vary  and  not  effect  the  performance  of  the  clock.  The  rest  of  the  monitors  will 
cause  an  upset  of  the  performance  by  any  detectable  movement  (minimum  step  size).  One  of 
the  monitors  having  particular  character  or  individuality  is  the  cesium  beam  current  monitor. 
This  trending  parameter  is  hard  to  interpret  in  the  sense  that  each  of  the  19  operating  clocks 
has  a  slightly  different  signature  as  seen  in  Figure  5,  SVN-17  has  the  normal  stair-stepping 
decline  in  beam  current.  Since  each  clock  starts  off  at  a  different  absolute  value,  each  has  a 
different  rate  of  decline  (the  higher  it  starts,  the  faster  it  drops)  and  each  has  a  different  final 
plateau.  So  each  drop  in  beam  current  may  or  may  not  effect  the  stability,  ai  or  terms,  or 
ERD"s.  Furthermore,  each  clock  will  degrade  or  age  at  a  different  rate.  Even  though  each 
clock  is  built  to  the  same  specification  and  from  the  same  set  of  drawings,  when  one  compares 
stability  performance  in  terms  of  parts  in  10^^,  there  will  be  variations  in  their  outputs. 

The  other  parameter  that  might  change  without  detrimental  effects  on  the  performance  is  the 
loop-control  voltage,  which  normally  will  move  slightly  one  way  or  another,  depending  on 
what  electronic  changes  or  aging  occur  in  the  loop  in  order  to  keep  the  same  10.23  MHz 
frequency  output  to  the  FSDU.  The  parameters  which  are  catastrophic  to  clock  performance 
if  any  movements  are  observed  are  the  cesium  oven  temperature,  RF  level  (power  shift  and 
or  spectrum  change),  electron  multiplier  gain  changes,  ionizer  voltage,  and  any  input  current 
changes  to  the  total  clock  or  to  individual  units  such  as  the  quartz  oven. 

The  rubidium  clocks  have  the  same  type  of  monitors  and  the  same  type  of  loop  control 
voltages.  The  lamp  voltage  monitor  which  detects  pressure  changes  and  photo  cell  degradations 
is  somewhat  similar  to  the  cesium  beam  current  in  terms  of  end-of-life  predictions. 

To  predict  the  exact  (  one  week)  end-of-life  of  either  type  of  clock  is  extremely  hard.  This  was 
tried  on  SVN-20  with  Cesium  No.  3.  After  4.5  years  of  operation,  the  stability  was  >  2  x  10“^^ 
one-day  with  four  to  five  extra  uploads  needed  per  week.  Maybe  two  to  three  months  of  less 
than  useful  life  could  have  been  squeezed  out  of  the  clock. 

Other  parameters  that  are  incorporated  into  the  trend  analysis  include  on-orbit  temperature 
of  the  spacecraft,  any  FSDU  -  NDU  influence,  or  L-Band  effects. 

SCHEDULES 

The  last  of  the  Block  I  satellites,  NAVSTAR  10  (PRN  12),  launched  in  1984,  is  scheduled  to 
be  disposed  of  in  the  June  1996  time  period.  The  main  problem  is  that  the  solar  arrays  have 
lost  their  efficiency  (design  life  of  five  years)  and  can  no  longer  support  the  navigation  payload. 
On  November  18,  1995,  the  payload  was  set  unhealthy.  Kalman  filter  tests,  frequency  standard 
tests,  sun  sensor  test,  etc.,  will  be  performed  in  February  and  March  1996.  The  two  rubidium 
frequency  standards,  yet  to  be  powered  up  after  12  years  of  on-orbit  storage,  will  be  tested 
for  stability,  temperature  coefficient,  VCXO  and  turn-on  characteristics  and  any  other  tests  the 
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clock  community  would  like  to  have  performed. 

The  last  Block  IIA  satellite  launched,  GPS-37,  reached  orbit  in  March  1994.  This  completed 
the  24  satellite  constellation.  There  are  four  vehicles  in  the  Eastern  Launch  Site  in  storage 
waiting  to  be  launched.  The  next  launch  is  planned  to  be  positioned  in  ‘‘Plane  C”  in  March 
1996.  There  are  available  launch  slots  for  summer  1996  time  frame. 

The  total  on-orbit  times  for  both  rubidium  and  cesiums  are  staggering  for  the  first  operational 
satellite  system  ever  to  utilize  both  types  of  production  frequency  standards.  The  on-orbit 
times  for  all  rubidiums  exceed  60  years  of  operation,  while  the  cesium  on-orbit  times  are 
more  impressive  with  over  125  years  of  operation.  The  GPS  clock  utilization  times  in  their 
operational  sequence  are  shown  in  Figure  6. 


CONCLUSION 

As  verified  by  on-orbit  performance  data,  most  of  the  major  generic  problems,  especially  with 
the  rubidiums,  have  been  corrected.  I  will  admit  that  the  rubidium  short  life  times,  the  phase 
jumps  that  occur  within  the  first  3  to  4  months  of  operation  and  the  changing  drift  rate  within 
the  first  6  months  are  on-going  problems.  There  have  been  31  out  of  48  cesium  clocks  activated 
with  19  currently  operating.  Of  the  12  disabled  clocks,  half  may  be  reactivated  with  possibly 
degraded  performance.  There  have  been  eleven  rubidium  clocks  activated  with  37  remaining 
to  be  turned  on.  Of  these  eleven  clocks,  five  are  still  operating  and  four  to  be  reactivated  fci 
future  use. 

The  average  age  of  all  the  disabled  clocks  is  1.65  years.  The  average  age  of  the  currently 
operating  clocks  is  2.9  years.  The  average  age  of  the  space  vehicles  is  4.5  years,  which  equates 
to  60%  of  the  design  life  (7.5  years).  The  total  number  of  clocks  turned  on  is  42,  which  equates 
to  using  only  44%  of  the  available  clocks.  The  usage  and  performance  to  date  indicates  that 
the  number  of  clocks  (four),  originally  determined  in  the  1982  proposal,  will  support  both  the 
spacecraft  design  life  of  7.5  years  and  the  mean  mission  duration  of  6.0  years. 

For  the  more  quick-look-managerial  type,  a  user-friendly  smiley  face  chart,  Figure  7,  has  been 
concocted  in  order  to  eliminate  reviewing  all  the  Kalman  drift  rate  residuals,  Allan  variance 
stability  curves,  and  ERD’s  figures.  Each  little  quirk  and  idiosyncrasies  of  the  vehicles  combined 
with  clock  performance  in  terms  of  ERD’s  are  for  your  (management)  eyes  only, 
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TABLE  1  RUBIDIUM  FREQUENCY  STANDARDS  -  BLOCK  I 


TYPES  OF  PROBLEMS 

NO, 

AGE  (YR) 

Hi  ♦  Low 

HOW  FIXED 

TRANSFORMER 

j 

0.53 

MOD.  P/N  3 

RUBIDIUM  FILL 

8 

1.0-  .3 

2,7 

MOD.  P/N  4 

C-FIELDJWNING  HITS 

.) 

12.5-0,4 

J.9 

MOD,  P/N  1 1 

vcxo 

) 

5. 1  -  0.03 

2.8 

NON-GENERIC 

DRIFT  RATE 

2 

0,5  . 

NON-GENERIC 

ATOMIC  LOOP* 

1 

0..5  -  0,5 

1  DAY 

NON-GENERJC 

OPERATIONAL  TO  END  * 

18 

7 

1.77 

12.5 -  .003 

1.2 

N/A 

NOMINAL  TURN-ON  (TESTS) 

2 

3,5  -O.l 

1  MONTH 

N/A 

NEVER  TURNED-ON  * 

3 

- 

N/A 

TOTAL 

30 

12,5  -  003 

’  ONE  STILL  available 
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TABLE  2  RUBIDIUM  FREQUENCY  STANDARDS  -  BLOCK  11 


•  DISABLED  6  CLOCKS 

AGE  (YRS.) 

SYMPTOMS 

1.7 

ERRACTIC  MONITORS 

1.4 

HEATER  CIRCUITRY;  LAMP 

1.4 

VOLTAGE  ERRACTIC 

DRIFT  RATE  LARGE; 

1.1 

DESERT  STORM  DECISION 
TEMPERATURE  SENSITIVE; 

0.2 

FREQUENCY  MOVEMENTS 
INSIDE  TEMPERATURE 

0.2 

CONTROLLER; 

FREQUENCY  MOVEMENTS 
DRIFT  RATE  LARGE 

AVE.  =  1.0  YR. 

OPERATIONAL  5  CLOCKS 

•  OLDEST  =  1.3  YRS. 

•  AVERAGE  =  0.8  YRS. 

I 


TABLE  3  CFS  BLOCK  U  VEHICLES 


No.  of  CFS  - 1?  Operating 

2 

2 

2 

4 

3 

3 

3 


AGE 

>  6  YRS. 
>5  YRS, 

>  4  YRS. 

>  3  YRS. 

>  2  YRS. 

>  I  YR, 
<  I  YR, 


12  -  PISABLED  AGE 

4.3  YRS. 

3.5  YRS. 

2.8  YRS. 

2.5  YRS. 

2.3  YRS. 

2.2  YRS. 

2.]  YRS. 

1.8  YRS. 

1,1  YRS. 

.7  YRS. 

0,1  YRS. 

0. 1  YRS. 


REASONS 

♦  o  >  2  E-13  at  I  day 
VCXO  OR  SERVO 
FUSE 

♦  VCXO;  At' 

♦  SECOND  SOURCE  - RF 

♦  35  DAY  CYCUC  PATTERN 

CBI  LOW,  HIGH  BACKGROUND  NOISE 
SECOND  SOURCE -RF 
EMULT;  Af 

VCXO,  DAC,  SERVO  or  EMULT 

♦  SOLAR  COEFFICIENT 

♦  DESERT  STORM;  AT 


♦  AVAILABLE  FOR  POSSIBLE  DEGRADED  OPERATION 
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GPS  CLOCK  UTILIZATION  IN  OPERATIONAL  SEQUENCE 


GPS  CLOCK  UTILIZATION 
IN  OPERATIONAL  SEQUENCE 
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Questions  and  Answers 


DAVID  ALLAN  (ALLAN’S  TIME):  Given  our  opening  talk  by  Captain  Foster  and  work 
that  Dr.  Winkler  did  some  years  ago  on  measuring  lifetimes  of  clocks,  I  wonder,  given  the 
importance  of  the  lifetime  of  this  system,  why  we’re  still  using  MTBF  rather  than  half-life,  as 
was  recommended  by  Dr.  Winkler.  That  was  a  very  excellent  piece  of  work,  and  it’s  a  much 
better  measure  of  lifetime  than  MTBF. 

M.J.  VAN  MELLE  (ROCKWELL  SPACE  AND  OPERATION  CENTER);  Right,  I 
still  don’t  —  this  is  a  reliability  person  that  I  gave  all  the  data  to  who  said  that  all  I  can  figure 
out  was  that  it  seemed  to  be  was  a  little  high.  Plus,  I  think  most  of  the  problems  that  we  had 
may  be  workmanship.  I  don’t  know  how  hard  it  is.  Remember,  this  is  the  first  production 
vehicle  we’ve  ever  had  with  production  nibidium  and  cesium  clocks  on  board.  To  me,  it’s  still 
in  the  infant  stages. 

But  to  answer  your  question,  I  don’t  know.  It  probably  would  be  a  little  better  the  way  you’re 
suggesting. 

DAVID  ALLAN  (ALLAN’S  TIME):  Well  it’s  the  work  that  Dr.  Winkler  did  on  those 
clocks  some  years  ago,  and  it’s  a  very  excellent  measure.  Perhaps,  in  terms  of  this  being  a 
PTTI  planning  meeting,  it’s  something  we  should  think  about  for  some  future  representation. 
I  don’t  know  whether  we  can  do  anything  here,  but  it  certainly  is  an  issue. 

M.J.  VAN  MELLE  (ROCKWELL  SPACE  AND  OPERATION  CENTER):  Sounds 
good  to  me. 

MARTIN  BLOCH  (FEI):  Van,  we’ve  discussed  this  many  times.  You  say  workmanship,  but 
something  bothers  me.  If  you  take  a  look  at  the  performance  of  similar  clocks  that  were  made 
by  the  same  manufacturers  on  the  ground,  they  outperform  the  space  segments  significantly, 
where  life  is  over  10  years  on  the  cesium  and  the  same  on  the  rubidium.  I’m  wondering  if 
there’s  some  other  reason  that  we’re  overlooking  on  what  is  happening  in  space  —  it  just 
sounds  that  the  number  of  failures,  with  all  the  care  that  space  hardware  is  supposed  to  take, 
that  workmanship  doesn’t  sound  to  me  is  a  good  excuse;  unless  what  you’re  implying  is  that 
we  do  worse  for  space  hardware  than  we  do  for  military  or  commercial  hardware. 

M.J.  VAN  MELLE  (ROCKWELL  SPACE  AND  OPERATION  CENTER);  Well  with 
the  rubidium,  you  know,  Rockwell  made  it,  Rockwell  is  not  a  clock  manufacturer.  They  took 
Efratom’s  physics  package  and  they  took  your  oscillator,  and  we  just  packaged  it  up  and  put 
it  together;  and  tested  it  only  like  three  or  four  months  on  the  ground.  Then  we  launched 
it.  Maybe  during  the  six-month  period,  it  would  have  a  failure  on  the  ground.  Maybe  the 
launches  affected  it,  but  we  still  do  a  lot  of  fault  testing  with  vibratun  and  so  forth.  We  only 
vibrated  it  once;  you  know,  maybe  the  second  vibration  killed  it. 

But,  the  FTDS’s  are  production  clocks  made  by  the  cesium  manufacturers,  and  they  seem 
to  have  a  little  longer  lifetime.  I  can’t  explain  why  the  Block-I’s  are  lasting  more  than  the 
Block-II’s.  But  then,  we  only  had  a  sample  of  six;  and  here  we  had  a  sample  of  19;  maybe  the 
sample  size  was  too  small  compared  to  the  complexity  of  the  standards  themselves. 

MARTIN  BLOCH  (FEI):  I  wonder  if  anybody  else  has  some  thoughts  as  to  the  other  effects 
that  influence  the  life  performance. 

M.J.  VAN  MELLE  (ROCKWELL  SPACE  AND  OPERATION  CENTER):  And  we’re 
talking  about  if  it  goes  to  5  x  it’s  no  good. 
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